360learning - Senior DevSecOps Engineer
Responsibilities
• Complete our onboarding and learn how we work through our own platform and our Convexity culture • Map our Azure and AKS environment, our detection and logging coverage, and our ISO 27001 and SOC 2 control scope with the CISO and the Security Engineer • Meet the DevOps, platform engineering and IT teams you will work with daily • Shadow alert triage and one customer security assessment end to end • Be autonomous on our AKS and Azure environment and handle infrastructure related alerts end to end • Have shipped at least one concrete hardening or automation improvement in production • Own the infrastructure scope of vulnerability management, from triage to remediation follow up • Have the honeypot live and producing high fidelity alerts • Have measurably widened SIEM connector coverage, with documented log sources and retention • Run infrastructure vulnerability remediation on a predictable cycle with SLA reporting • Manage detection content as code, with reviewed and tested rules and documented runbooks • Have largely automated audit evidence on the infrastructure scope • Have eliminated long lived credentials on the critical paths, so engineering teams ship on secure defaults they did not have to think about • ## The Skill Set: • 5+ years in infrastructure, cloud or platform engineering with a strong security focus, or in security engineering with hands on infrastructure practice • Production experience with Kubernetes: RBAC, network policies, admission controllers, secrets handling, workload identity, runtime security • Solid cloud experience, ideally Azure. Strong AWS or Google Cloud experience with a genuine interest in converting works too • Infrastructure as code: Terraform, GitOps workflows, CI/CD pipelines • Scripting and automation: Python or Go, plus shell. Comfortable reading and writing code, and opening pull requests on repositories owned by other teams • Log analysis and investigation: cloud audit logs, query languages, correlation across identity, network and application sources • Fluent English (US/UK) / B2 level or equivalent (FR). • Enthusiasm for our working environment explained here: https://bit.ly/Convexity360L
Benefits
• Compensation: Package includes base salary, a variable component and equity 📈 • Benefits/Perks: Work From Home stipend, RTT, lunch vouchers, medical insurance, gym subscription, 1 month parental leave for the second parent. • Balance: Flexible hours, full remote work possible anywhere in France 🏠 • Diversity, Equity, and Inclusion: We have 6 active ERGs including Mental Health, Environmental/Sustainability, Women, Parents, LGBTQIA2S+, and Ethnic Diversity. Each group has at least one executive team member serving as a member of the group, bringing greater awareness to each group’s activities and providing a quick path to impact 🤝 • Corporate Social Responsibility: Review our CSR Charter: 360learning.com/blog/corporate-social-responsibility-charter 🌎🌏🌍 • Culture: A framework that will help you make an impact - envision our way of working and our Convexity Culture: https://bit.ly/Convexity360L & find out more about the teams, product and processes https://bit.ly/42H1ggC 🚀👩🏻💻🏆 • ## Interview Process: • Phone Screen with our Talent Acquisition Manager • Discovery Meeting with our Head of Security • Live exercise with our Head of Security and our Head of Devops: investigation of an incident scenario, or review of an insecure infrastructure configuration • Clarification Meeting with the Security Engineer and a DevOps engineer • Culture Fit Meeting with our VP of Engineering
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT